How-to
How to reset a password with a second factor
Password reset is email-link plus a second factor. Completing reset never turns MFA off.
Request a single-use link from the login surface. Completing the reset requires a second-factor code.
The generated local or platform credential-store client performs the reset. The UI never constructs that path.